4 ms·
Larger projects tend to have more dependencies too, so why not rail against large projects?
by grandalf 11y ago
Larger projects tend to have more dependencies too, so why not rail against large projects?
- regularfry 11y agoBecause there will be fewer of them.
- grandalf 11y agoFewer packages? Who is to determine the optimal number of packages? Not sure how that benefits anyone. I hesitate to accuse you of trolling but your argument does not seem all that coherent.
- regularfry 11y agoIt's pretty simple: the more dependencies there are, the more upstream authors you have to trust.
- grandalf 11y agoThat assumes a lot. My code may utilize one dependency that itself utilizes a few dozen useless ones. Whereas someone else may carefully choose 20 dependencies, none of which include any dependencies. The issue is measuring the trustworthiness of a dependency, and recursively doing that operation throughout the dependency graph. Simply focusing on the number of dependencies or the size of a dependency is silly.